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ABSTRACT 

In  this  paper(.we  present  .theoretical  results  on  a  generalized  form  of  partial  order,  called 
hierarchical  partial  order,  for  enforcing  serializability  that  takes  advantage  of  transaction  analysis 
in  database  systems.  Transaction  analysis  partitions  the  database  into  data  partitions  that  may 
assume  a  hierarchy  of  priorities,  such  that  transactions  primarily  updating  less  critical  data  parti¬ 
tions  will  not  interfere  with  transactions  primarily  updating  the  more  critical  data  partitions,  or 
will  do  so  to  a  lesser  extent  than  those  in  conventional  systems.  This  results  from  the  ability  of 
transactions  in  the  system  to  access  different  data  partitions  using  different  synchronization  proto- 
cob  The  rules  governing  the  different  protocob  are  presented  and  their  correctness  with  respect 
to  serializability  b  proven. 

r 


1.  Introduction 


Conventional  algorithms  for  database  concurrency  control  ensure  transaction  serializability 
by  forcing  transaction  dependencies  to  obey  certain  partial  order.  In  the  case  of  two-phase  lock¬ 
ing  [Eswaran76],  the  partial  order  coincides  with  the  order  of  transaction  lock  points.  In  the  case 
of  basic  timestamping  algorithm  [Bernstein80,  Reed78],  the  partial  order  coincides  with  the  order 
of  transaction  timestamps,  typically  the  transaction  initiation  times.  Therefore,  for  example,  if 
the  basic  timestamping  algorithm  is  used,  a  transaction  t  with  a  timestamp  TS,  is  allowed  to 
write  a  data  element  d  only  if  d  has  not  been  read  by  any  other  transaction  whose  timestamp  is 
greater  than  TS,.  Conventional  algorithms  rigidly  obey  this  chosen  partial  order  which  is 
assigned  to  transactions  without  much  consideration  for  other  factors,  such  as  a  priori  knowledge 
of  potential  interferences  among  clones  of  transactions. 

In  this  paper  we  present  theoretical  results  on  a  more  generalized  form  of  partial  order  for 
enforcing  serializability  that  takes  advantage  of  transaction  analysis.  Consider  a  database  applica¬ 
tion  system  with  a  database  D  partitioned  into  D,  and  D2.  Transactions  are  partitioned  accord¬ 
ingly  into  classes  Tx  and  To,  where  transactions  in  Tx  primarily  read  and  update  data  elements  m 
Dx,  and  those  m  7%  primarily  update  data  elements  in  D~,  but  also  make  frequent  read  accesses 
to  data  elements  in  D,.  Using  conventional  concurrency  control  algorithm,  transactions  in  7"2.  due 
to  their  read  accesses  to  Dx,  would  interfere  with  concurrent  transactions  in  Tx.  However,  if  7",  is 
considered  a  class  of  higher  priority  than  T2,  this  interference  may  be  reduced  or  eliminated  if  we 
allow  transactions  in  7*j  to  use  a  slightly  older  "time  slice"  of  Z? t .  In  particular,  assume  that  the 
system  uses  timestamps.  If  a  transaction  t  in  T2,  which  has  been  assigned  a  timestamp  TS,,  uses 
a  pseudo-timestamp  T5(_  which  is  smaller  than  the  timestamp  of  the  oldest  active  transaction  in 
T,  at  the  time  of  access,  it  would  not  interfere  at  all  with  transactions  in  T,  In  addition,  t  may 
still  be  using  TS,  to  coordinate  accesses  to  data  elements  in  Z?2. 

In  this  example,  data  elements  in  Dx  can  be  considered  row  data,  while  data  elements  in  D2 
derived  data.  It  appears  that  transactions  responsible  primarily  for  writing  derived  data  (e  g  , 


transactions  in  class  T2),  or,  in  general,  transactions  of  lower  priorities,  can  be  prevented  from 
interfering  with  those  processing  the  raw  data,  or,  in  general,  those  of  higher  priorities.  The  above 
example  may  be  generalized  to  an  application  composed  of  more  than  2  data  partitions  (and, 
therefore,  more  than  2  transaction  classes),  forming  an  information  hierarchy.  An  information 
hierarchy  can  be  represented  as  a  directed  acyclic  graph  (DAG),  where  nodes  are  data  partitions 
and  arcs  represent  the  derivation  path  or  priority  ordering. 

We  examine  the  following  question  in  this  paper:  given  a  transaction  class  T;  which  is  pri¬ 
marily  responsible  for  writing  to  data  partition  Dj,  what  are  the  rules  it  must  follow  in  computing 
the  time  slice  it  uses  for  each  data  partition  without  compromising  overall  serializability  of  the 
system?  Results  are  presented  for  the  case  in  which  the  information  hierarchy  is  a  semi-tree,  a  res¬ 
tricted  form  of  DAG. 

Relevant  work  Conflict  analysis  among  transactions  has  been  proposed  in  the  research  of 
SDD-1  [Bemstein80]  as  a  vehicle  to  discover  certain  (static)  conflict  patterns  among  transaction 
classes  that  may  enable  a  more  flexible  timestamp  protocol  (e.g..  Protocol  1  in  SDD-l’s  terminol¬ 
ogy)  to  be  used.  However  the  SDD-1  approach  stops  short  of  developing  a  generalized  theory 
Multi-version  databasess.  conducive  to  the  implementation  of  the  notion  of  database  time  slices, 
has  been  shown  to  provide  a  higher  level  of  concurrency  than  the  conventional  single-version  ones 
Bernstein83.  Papadimitriou84l.  A  relevant  multi-version  algorithm  has  been  presented  in 
'Chan82,  Chan85i.  The  results  in  this  paper  offer  a  fundamental  proof  method  for  verifying 
correctness  of  algorithms  designed  specifically  for  information  hierarchies  (e.g.  methods  proposed 
in  [Hsu86]  is  a  special  case  of  scenarios  supported  by  results  in  this  paper).  In  comparison,  the 
tree  locking  protocol  (Silberschatz80,  Kedem83j  is  a  non-twophase  locking  protocol  which  aims  at 
reducing  the  amount  of  time  the  locks  on  the  "high-lever  nodes  of  a  tree  must  be  held  by  each 
transaction.  The  hierarchy  used  in  their  tree  protocol  is  entirely  different  from  the  kind  of  infor¬ 
mation  hierarchy  the  current  paper  is  concerned  about. 


We  now  present  the  definition  of  the  generated  partial  order,  called  hierarchical  partial 
order,  followed  by  the  interpretation  and  the  proof  of  the  acyclicity  theorem,  the  major  result  of 
the  paper. 

2.  The  Hierarchical  Partial  Order  of  Transactions 

The  hierarchical  partial  order  among  transactions  requires  the  decomposition  of  a  database 
into  a  number  of  data  partitions.  We  construct  a  data  partition  hierarchy  which  is  basically  a 
partial  order  of  the  data  partitions  subject  to  certain  constraints. 

2.1.  Data  Partition  Hierarchy  and  Transaction  Classification 

Definition.  Given  a  data  decomposition  P  of  a  database  D  into  data  partitions  £>,,  Do,..., 
Dn ,  and  a  transaction  analysis  which  partitions  all  potential  update  transactions  in  the  database 
into  a  set  Tt  of  update  transaction  types,  TPU  ..,  TPm,  a  data  partition  hierarchy,  denoted  as 
DPH(P  ,T%),  is  any  acyclic  graph  with  nodes  corresponding  to  D\,  Do,...,  £>„,  such  that 

Cl  it  is  a  semi-tree 

(a  semi-tree  is  an  acyclic  digraph  where  there  exists  one  and  only  one  undirected  path 
between  any  pair  of  nodes),  and 

C2l  if  there  exists  a  type  of  update  transactions  in  the  system  which  write  in  D,  and  read  from  or 
writes  in  Z); ,  then  there  exists  a  directed  path  between  Z),  and  D;  in  DPH(P ,Tn). 

It  is  noted  that  only  update  transactions  need  participate  in  constraining  the  data  partition 
hierarchy.  There  it  no  need  for  read-only  transactions  to  participate  in  the  transaction  analysis, 
eliminating  the  difficulties  of  pinning  down,  a  priori,  the  nature  of  all  ad  hoc  queries. 

There  may  be  multiple  data  partition  hierarchies  that  satisfy  the  above  definition  given  a 
database  decomposition.  Ln  particular,  any  total  order  of  partitions  in  P  satisfies  the  definition. 
The  actual  choice  of  the  data  partition  hierarchy  will  reflect  the  perceived  priorities  of  the  write- 
processing  in  each  of  the  data  partitions. 
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Given  a  data  partition  hierarchy,  each  transaction  is  assigned  to  one  of  the  data  partitions  it 
writes  into.  Typically,  the  data  partition  chosen  is  the  one  in  which  the  transaction  performs  all 
or  most  of  its  writes.  This  data  partition  is  called  the  home  data  partition  of  the  transaction,  and 
all  transactions  with  the  same  home  data  partition  are  grouped  into  a  transaction  class.  From 
[C2]  of  the  definition  of  data  partition  hierarchy,  if  a  transaction’s  home  data  partition  is  Dit 
denoted  as  tcD,,  then  there  is  a  directed  path  between  D,  and  any  other  data  partition  in  DPH 
that  the  transaction  accesses  (read  or  write). 

In  the  remainder  of  the  paper,  the  notation  DPH  refers  to  a  particular  data  partition  hierar¬ 
chy  chosen  to  base  our  hierarchical  partial  order  of  transactions.  We  say  that  data  partition  Dj  is 
higher  than  data  partition  Dj,  denoted  as  D,>Dj,  if  there  exists  a  directed  path  in  DPH  from  Dj 
to  D;.  Intuitively,  in  our  notation,  higher  level  data  partitions  are  most  likely  raw  data  from 
which  the  lower  data  partitions  derive  their  contents.  We  say  that  D,  and  D}  are  related  if  either 
D^Dj  or  Dj  and  Dj  are  connected  by  a  directed  path.  We  also  say  that  D,  and  Dj  are  neighbors 
if  they  reside  on  directed  paths  in  DPH  that  intersect.  By  definition,  if  D ,  and  D}  are  related 
then  they  must  be  neighbors. 

2.2.  The  =>  Relation 

Definition.  A  relation  (pronounced  as  "L-follows"),  is  defined  for  a  pair  of  transac¬ 

tions  <j,  to  where  t\iDi:  t2iDj,  and  D,  and  Dj  are  neighbors  in  DPH.  Given  two  functions  TS  and 
L.  we  say  that  t2—>  f,  with  respect  to  TS  and  L.  iff  there  exists  a  Dk  in  DPH  such  that  Dk  is 
related  to  both  Dj  and  Dj,  and 
L/,s,(TStJ>LiJTSli), 

where  TS  is  a  function  which  maps  a  transaction  to  a  time  value  such  that  no  two  transactions 
have  the  same  time  value:  the  function  L, ; ,  which  stands  for  link  function,  ls  defined  for  any  pair 
of  related  data  partitions  Dj  and  D}  and  maps  one  time  value  'o  another  time  value  as  follows: 


(1)  if  Dj  —  Dj  then  Lj  ;(m)=»m; 
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(2)  if  Di>Dj  then  Litj(m)^DNi%i{m)\ 

(3)  if  Dt<Dj  then  L(j(m)—UPij(m); 

where  the  function  UPjj,  standing  for  UPward  function,  is  defined  for  any  pair  of  data  par¬ 
titions  D(  and  D}-  where  Dj<D}-,  and  maps  a  time  value  to  another  time  value;  the  function 
DNij,  standing  for  DowNward  function,  is  defined  for  any  pair  of  data  partitions  D,  and  Dj 
where  D{>Dj,  and  maps  a  time  value  to  another  time  value;  for  any  pair  of  D{  and  D.  where 
Dt  <Dj,  functions  t/P.  y  and  DNj%i  must  satisfy  the  following  three  properties: 

[Pi]  Composible:  for  all  Dit  Dk  and  D}-  where  DjS  Dk>Dit  for  all  times  m, 
UPk,i ( UP ( m ))=  UP ,-y ( m ) ,  and  DN.ADN^m^DN^m). 

[P2]  Non-decreasing:  for  all  D;  and  Dj  where  Z);  >/),•  and  for  all  times  m,  m1  where  m  >m! , 

UPi.Am)>UPiAm')  DN,Am)>DNjAm'). 

[P3]  Value-interlocked:  for  all  D{  and  Dj  where  Dj>Dj  and  for  all  time  m, 

UPj j(DNj  j(m))<m  .  and  MJ,l(rP,J(m))>m. 

Intuitively,  =  >  is  a  relation  between  transactions  based  on  both  the  timing  of  the  transac¬ 
tions  and  the  hierarchical  levels  in  the  DPH  of  the  transaction  classes  that  the  transactions  belong 
to.  To  be  more  specific,  "f,  =  >  tf  always  means  that  tj  is  "later"  than  t:.  However,  this  later' 
is  not  only  based  on  when  the  two  transactions  are  physically  active,  but  also  on  the  relative  lev¬ 
els  of  the  data  partitions  in  which  ti  and  f;  are  assigned  to.  Clearly.  =  >  is  defined  only  between 
transactions  that  belong  to  neighboring  data  partitions,  and  the  UP  and  DN  functions  are  defined 
only  between  related  data  partitions. 

Note  also  that  the  functions  TS ,  UP  and  DN  are  not  completely  specified;  only  their  neces¬ 
sary  properties  have  been  specified.  This  means  that,  by  manipulating  the  instantiation  of  these 
functions,  different  instances  of  the  relation  =>  may  be  defined.  For  example,  both  the  initiation 
timestamp  function,  which  maps  a  transactic  o  its  initiation  time,  and  the  commit  timestamp 
function,  which  maps  a  transaction  to  its  commit  time,  are  acceptable  instantiations  of  the  TS 
function.  An  example  of  a  construction  of  UP, ,  and  DN;  ,  which  satisfies  the  non-decreasing  and 


value-interlocking  properties  is  UP{  j(m)=m  —  Cij  and  DN}- for  an  appropriate  con¬ 
stant  Cij  . 

2.3.  The  Acyclicity  Theorem 

The  key  result  of  the  paper  is  the  following  theorem: 

The  Acyclicity  Theorem.  A  digraph  where  nodes  are  transactions  and  every  arc  t2— *t, 
implies  <2  «=>  f,  has  no  cycle. 

The  theorem  states  that  if  a  concurrency  control  algorithm  allows  a  transaction  dependency 
to— *f[  to  occur  only  when  i2  =>  holds,  then  serializability  is  guaranteed.  Given  the  structure 
of  an  information  hierarchy,  and  the  desire  to  reduce  or  eliminate  interferences  from  lower- 
priority  transactions  to  higher-priority  transactions,  one  needs  to: 

(1)  Define  a  TS  function; 

(2)  Construct  a  function  UP  which  maps  time  values  to  successively  smaller  values  along  the 
hierarchical  path  upwards  in  DPH.  and  a  DN  whcih  maps  time  values  to  successively  larger 
values  downwards,  where  UP  and  DN  also  satisfy  the  composibilitv.  non-decr-asmg  and 
value-interlocking  requirements; 

(3)  Allow  lower-level  transactions  {tcD,)  to  access  an  older  time  slice  before  UP,  j(TSt)  in  a 
higher  data  partition  £);  ;  and 

(4)  Allow  higher-level  transactions  ( tcD ;)  to  access  and  timestamp  a  lower-level  data  partition 
(Dj)  with  the  time  value  DNj,(TSt). 

It  is  noted  that  when  DPH  consists  of  a  single  data  partition,  or  when  UP  and  DN  are 
assigned  identity  functions,  =*>  degenerates  to  the  partial  order  typically  enforced  in  conven¬ 


tional  algorithms. 
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2.4.  Proof 

To  prove  this  theorem,  we  will  first  define  a  weaker  relation  ~>,  (pronounced  as  "weakly 
L_folLows”,)  such  that  =>  implies  «>  and  implies  — >( i i  =  J> t2)-  We  prove  that  is 

locally  transitive,  i.e.,  if  f3«>i2  and  t2^>tl  and  <1(  1 2  and  t3  are  neighbors  of  one  another  then 
Local  transitivity  completes  the  proof  of  the  Acyclicity  Theorem  for  a  data  partition 
hierarchy  in  which  all  data  partitions  are  neighbors  of  one  another.  Finally  we  extend  the  transi¬ 
tivity  result  to  show  global  transitivity.  (In  the  following  proofs,  for  notational  convenience,  we 
denote  the  home  data  partition  of  a  transaction  t,-  as  D{.) 

Definition.  Given  the  definition  of  =>,  we  say  that  1 2  weakly  =>  tj,  denoted  as 
if  (a)  if  £>,  and  D2  are  related  then  for  all  Dm  on  the  shortest  path  in  DPH  between  D,  and  D2 
inclusive,  L2m(TStJ>L\ ,m{TSti)  [0.1],  and  (b)  if  Dx  and  D2  are  not  related  but  the  shortest  path 
between  them  turns  direction  at  Dm,  then  for  all  Dp  on  the  shortest  path  in  DPH  between  D2  and 
Dm  inclusive,  L2  p{  m(  TSti))  [0.2],  3nd  for  all  D ,  on  the  shortest  path  in  DPH 

between  and  Dm  inclusive.  L2_m(Lmp(TS,J)>L[.,[TSt{)  [0.3] .  iNote  that  by  the  fact  that 
DPH  is  a  semi-tree  there  exists  one  and  only  one  shortest  path  between  any  pair  of  data  parti¬ 
tions.  and  by  definition  of  neighbors  the  shortest  path  between  any  neighboring  data  partitions 
can  turn  direction  at  most  once,  i.e.,  the  path  between  any  pair  of  neighboring  data  partitions  ls 
either  one-phase  or  two-phase.) 

Lemma  1.  t2=^>tl  implies 

Proof.  We  want  to  show  that  (a)  [0.1]  in  the  above  definition  of  ~  >  is  true,  and  (b)  ;0.2] 
and  [0.3]  in  the  definition  of  ~  >  is  true.  Since  t2*=>t].  let  L2l[TSt^  >LX ,(  TSt^  for  some  D, 
related  to  both  D]  and  D2  [  1- 1] - 

(a)  Suppose  0.1  is  not  true.  Then  there  exists  Dk  on  the  shortest  path  between  D.  and  D: 
inclusive  such  that  L2  k{  TS,J  •- L ,  *(  TS,^  2.1  .  (For  brevity,  "inclusive"  is  always  implied  from 
now  on.)  Consider  the  following  two  cases:  (a.l)  Let  Dp  be  any  data  partition  on  fhe 


shortest  path  in  DPH  between  Dx  and  Dk.  Then  applying  UPkp  to  both  sides  of  [2.1]  and  making 
use  of  the  properties  of  UP  and  DN  functions  we  have  UP2iP(TStJ<DNlp(TStl).  Similarly  let 
£>f  be  any  data  partition  on  the  shortest  path  in  DPH  between  D2  and  Dk.  By  applying  DNk<1  on 
both  sides  of  [2.1]  we  have  UP2it(TS,J<DN Therefore  if  [2.1]  were  true  then  for  all  Dm 
in  between  Dx  and  D2  we  have  UP^m( TStJ<DN{  m(  TS, t).  However,  if  this  were  true  then  there 
cannot  exist  any  D{  satisfying  [l.l],  contradictory.  Therefore  [2.1]  cannot  be  true,  (a.2)  D2>DX. 
Then  for  all  Dr  s.t.  D2>Dp>Dk  we  have  DN2tP(TSt^<UPlp(TStl),  since  if  this  were  not  true 
then  we  get  DN2k(TSt^>UP lrk(TSti),  contradictory  to  [2.1].  Similarly  for  all  Df  s.t.  Dk>D^>Dx 
we  have  D^/2i#(r5,a)<t/Plff(T5,i).  Using  same  argument  in  (a.l)  we  obtain  contradiction  to  [l.l] 
and  therefore  [2.1]  cannot  be  true.  Combining  (a.l)  and  (a.2)  we  conclude  [0.1]  is  true. 

(b)  We  have  L2m(TSt^>Ll  m(TStJ  [3.1]  since  if  this  were  not  true  there  cannot  exist  D, 
such  that  [l.l]  is  true.  Consider  two  cases:  (b.l)  Dm  >DUD2.  Applying  DNm  f  to  both  sides  of 
3  1  we  have  DNm^(LZm[TStJ)>UPUi(TStJ,  i.e.,  LmJL^m(TSt^)>LUp(TS,t),  therefore  [0.3]  is 
true.  Suppose  [0.2]  were  not  true.  Then  we  have  some  Dp  such  that  L2  p(  T5,J  <Lm-p(Lx 7”5(  )) 
3.2! .  Applying  UPp.m  to  both  sides  of  [3.2!  we  have  UP2  m(  TSt^<LXm{  TSt]),  contradictor.'  to 
[3.1].  Therefore  [0.2]  must  be  true.  So  we  have  both  [0.2]  and  [0.3]  hold,  (b.2)  Dx.D2^>Dm. 
Using  similar  arguments  as  presented  in  (b.l)  one  can  show  [0.2]  and  [0.3]  hold.  Combining  (b  1) 
and  (b.2)  we  conclude  [0.2]  and  [0.3]  true. 

Lemma  2.  t2«>{,  implies  -<(t1*>t2). 

Proof.  From  Lemma  1,  it  is  clear  that  if  t2«>t,  then  for  all  Dk  related  to  both  Z>,  and  02 
Lt,k(TSt^Llik(TSti).  Therefore  -.(t,=  >f2). 

Lemma  3.  (Local  Transitivity)  The  relation  «s>  is  transitive,  i.e..  if  there  exists  txtD x, 
t2tD2,  t3tD3,  such  that  t2«>f,,  (3»>12  and  Dx,  D2  and  D3  are  neighbors  of  one  another,  then 


-fl- 


Proof.  Since  Du  D2  and  D3  are  neighbors  of  one  another,  let  the  shortest  path  between  Dx 
and  D3  contains  Dm,  where  Dm  is  on  the  path  between  Dx  and  D2  and  D2  and  D3.  Then  every 
Dp  between  D3  and  Dm  is  also  on  that  between  D3  and  D2,  and  every  Df  between  Dx  and  Dm  is 
also  on  that  between  D2  and  Dt.  For  D{  and  Dj  neighbors,  we  denote  as  LLi}(x)  either  L,  •(*)  if 
D{  and  D}-  are  related,  or  Lk}(Lik(x))  if  D{  and  Dj  are  not  related  but  the  shortest  path  between 
them  turns  at  D„.  Then  by  t^>tu  i3«>i2  we  have  LL3,m(TSt}>LL2<m{TSt)  >LLUm[TStl). 
Therefore  LL^TS^LL^TS^  •LLmJLL2,m(TS^)  >LmJLLl<M(TSti))  TS,,).  Simi¬ 

larly  we  derive  LL3ip(TS(^^LLit1(TSt^j.  Therefore  for  all-in  between  Dx  and  D3  we  have 
LL3iJ(TS,j)>LL1i/(TS,i).  Therefore 

Next  we  extend  local  transitivity  to  allow  for  more  general  data  partition  hierarchy. 

Lemma  4.  Given  a  DPH,  if  ■  -><e,  denoted  as  LF(tk,t,),  and  Dk  and  D,  are 

neighbors,  then  <*«>(,. 

Proof.  We  prove  by  induction  in  the  length  l  (i.e..  number  of  arcs)  m  LF(t„,tt).  (a)  If  /* 2. 
then  by  local  transitivity,  (b)  Show  that  if  for  any  LF{t,,t,)  whose  length  is  less 

than  g  and  D,  and  are  neighbors,  then  for  any  LF{t{,lt^)  = 

whose  length  is  g  and  Dx  and  D}+ j  are  neighbors.  Consider  two  sub¬ 
cases:  (b.l)  If  D,  and  D}  are  neighbors,  then  i, ~>i,.  Therefore  (b.2)  If  Dx  and  D} 

are  not  neighbors,  then  since  they  have  a  common  neighbor  D}M.  there  exists  tk  such  that 
LF{tlt tp)  <■  —  >tk~  >..**>  tf  and  Dk  are  neighbors  of  both  D,  and  Df+X.  Since  LF(tx,tk) 

has  length  less  than  g,  we  have  Likewise  we  have  ><,+,.  By  local  transitivity,  we 

have  t\!SS>tl^x.  Q.E.D. 

Proof  of  Acyclicity  Theorem.  Suppose  there  is  a  transaction  dependency  cycle 
tx— ►<,—•<).  Then  from  Lemma  4,  we  have  t, and  therefore,  from  Lemma  2.  we  have 
->( („»><().  This  means  that  there  cannot  be  a  transaction  dependency  tn  —  t ,,  contradictory 
with  the  given.  Therefore  there  cannot  be  a  cycle  Q  E  D 
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